High severity7.5NVD Advisory· Published Mar 8, 2022· Updated Jun 17, 2026
CVE-2022-24716
CVE-2022-24716
Description
Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. Unauthenticated users can leak the contents of files of the local system accessible to the web-server user, including icingaweb2 configuration files with database credentials. This issue has been resolved in versions 2.9.6 and 2.10 of Icinga Web 2. Database credentials should be rotated.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- Range: before 2.9.6 and 2.10
- Range: >= 2.9.0, < 2.9.6
Patches
Vulnerability mechanics
References
4- github.com/Icinga/icingaweb2/commit/9931ed799650f5b8d5e1dc58ea3415a4cdc5773dnvdPatchThird Party Advisory
- github.com/Icinga/icingaweb2/security/advisories/GHSA-5p3f-rh28-8frwnvdThird Party Advisory
- security.gentoo.org/glsa/202208-05nvdThird Party Advisory
- packetstormsecurity.com/files/171774/Icinga-Web-2.10-Arbitrary-File-Disclosure.htmlnvd
News mentions
0No linked articles in our index yet.